Scanned skills

github/awesome-copilot security-review

Checked the catalogued skill at security-review.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 8
F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

8 findings
securitycritical SD-001
references/vuln-categories.md
securitycritical SD-001
references/vuln-categories.md
securityhigh SD-007
references/vuln-categories.md
permission_hygienehigh SD-003
references/vuln-categories.md
permission_hygienehigh SD-003
references/vuln-categories.md
permission_hygienecritical SD-004
references/vuln-categories.md
permission_hygienehigh SD-003
references/vuln-categories.md
permission_hygienehigh SD-003
references/vuln-categories.md
2 suppressed by AI triage
securitycritical SD-001 benign_example
references/report-format.md

The content is documentation describing a vulnerability elsewhere, not executable code that could be abused.

permission_hygienecritical SD-006 benign_example
references/secret-patterns.md

Hardcoded key is a placeholder in documentation, not a real secret.